Nest Bedding Privacy Policy

Last Reviewed August 18, 2026

Nest Bedding ("Nest Bedding," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with our websites, online store, retail locations, customer service, orders and deliveries, returns and warranties, marketing, and other consumer interactions.

1. Scope of This Policy

This Privacy Policy applies to personal information we collect online and offline in connection with our consumer business, including through www.nestbedding.com (the "Website"), retail locations, telephone and email communications, customer-service systems, order and warranty processes, and related services.

This Privacy Policy does not apply to unaffiliated websites or services that maintain their own privacy policies. We do not sell our products outside North America, and this policy is intended to address applicable U.S. and Canadian privacy requirements, including the CCPA/CPRA, VCDPA, CPA, UCPA, and other applicable privacy statutes.

2. Information We Collect

Depending on how you interact with us, we may collect the following types of personal information:

a. Information You Provide

• Name
• Email address
• Shipping and billing address
• Telephone number
• Account, order, delivery, return, exchange, and warranty information
• Transaction details, such as purchase amount, payment method, and transaction status
• Marketing preferences
• Information submitted through forms, checkout, reviews, surveys, or other communications

Full payment-card information is collected and handled by our payment processors. Nest Bedding receives transaction details through Shopify but does not receive or retain full payment-card numbers or security codes.

b. Automatically Collected Information

When you use the Website, we and providers acting for or with us may collect device and browsing information through cookies, pixels, and similar technologies. This may include IP address, browser and device type, device identifiers, pages viewed, links selected, interactions with the Website or advertisements, referring pages, approximate location derived from IP address, and cookie or advertising identifiers.

c. Customer-Support Information

If you contact us by telephone, email, chat, social media, or another channel, we may collect and retain the content of the communication and related records. We use this information to respond to you; administer orders, deliveries, returns, warranties, and disputes; conduct quality assurance; detect and prevent fraud, abuse, and security incidents; maintain records; comply with law; and establish, exercise, or defend legal claims. We do not use the content of customer-support communications for targeted advertising.

d. Categories and Sources

The categories of personal information we have collected during the preceding 12 months may include identifiers; customer-record information; commercial information; internet or other electronic network activity; approximate geolocation; audio, electronic, visual, or similar information; and inferences such as product preferences or fraud indicators. We collect this information from you, your browser or device, our Website and retail operations, and providers involved in e-commerce, payment processing, delivery, customer service, analytics, advertising, fraud prevention, and security.

We use and disclose sensitive personal information, if any, only as reasonably necessary to provide requested goods and services, process transactions, protect accounts, prevent fraud, comply with law, and for other purposes permitted without a right to limit under applicable law. We do not use sensitive personal information to infer characteristics about consumers.

e. Retention

We retain each category of personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, using the following criteria:

• Order and transaction records are retained as needed to fulfill orders, provide returns and warranties, meet tax and accounting obligations, prevent fraud, resolve disputes, and establish or defend legal claims.
• Customer-support records are retained as needed to respond to requests, administer orders and warranties, conduct quality assurance, resolve disputes, and comply with legal obligations.
• Email marketing information is retained until you unsubscribe or request deletion, subject to limited suppression records maintained to honor your opt-out.
• Cookie, device, and browsing information is retained according to cookie duration, your privacy choices, provider settings, security needs, and applicable legal requirements.

3. How We Use Your Information

We use personal information to:

• Provide and manage our products and services
• Process payments and administer orders, deliveries, returns, exchanges, and warranties
• Respond to inquiries and customer-service requests
• Send marketing emails when you have opted in or when otherwise permitted by law
• Personalize and improve Website functionality and user experience
• Measure Website and marketing performance
• Detect, prevent, investigate, and respond to fraud, abuse, chargebacks, transaction disputes, security incidents, and unlawful activity
• Conduct quality assurance, internal analysis, reporting, and business administration
• Maintain records, comply with law, enforce agreements, and establish, exercise, or defend legal claims

We do not use personal information from customer-support communications for targeted advertising.

4. Cookies, Pixels & Tracking Technologies

Our Website uses cookies and similar technologies. When you visit the Website, our cookie preference tool allows you to accept or reject nonessential cookies and to modify your preferences by category:

• Strictly Required Cookies
• Analytics & Statistics
• Marketing & Retargeting
• Functional Cookies

Strictly Required Cookies remain active because they support functions such as security, checkout, login sessions, network management, and saving privacy preferences. If you opt out through our cookie settings, we disable Analytics & Statistics, Marketing & Retargeting, and Functional Cookies for that browser as described in the preference tool. You may change your choices at any time.

Sale, Sharing, and Targeted Advertising

We do not sell personal information for money, rent personal information, or provide customer lists to data brokers or list purchasers. However, our use of advertising and analytics cookies or pixels may make identifiers and internet or electronic network activity information available to advertising, marketing, and analytics partners so that they can measure campaigns or display advertising based on activity over time and across websites. Applicable privacy laws may define this activity as the "sale" or "sharing" of personal information or as targeted advertising, even though Nest Bedding is purchasing advertising services rather than selling a customer list.

During the preceding 12 months, the categories of personal information that may have been sold or shared in this manner are identifiers and internet or other electronic network activity information. The recipient categories are advertising, marketing, and analytics providers. The purpose is to measure advertising and provide targeted or cross-context behavioral advertising.

You may opt out through the Do Not Sell or Share and Manage Your Privacy Choices options on our U.S. Privacy Requests page or through our cookie settings. Where required by applicable law, we also process qualifying browser-based opt-out preference signals, such as Global Privacy Control, as a request to opt out for the browser or device sending the signal and for any associated consumer profile when required and technically feasible. We do not knowingly sell or share the personal information of consumers under 16 years of age.

5. Email Marketing Communications

We use Klaviyo to send marketing emails. If you subscribe or otherwise consent to receive marketing, we may provide Klaviyo with your email address, marketing preferences, and information about engagement with our emails so that Klaviyo can send and help us measure those communications on our behalf.

You may unsubscribe at any time by using the unsubscribe link in a marketing email or contacting us. Transactional or service messages concerning an order, delivery, warranty, return, account, or similar matter are not marketing messages and may continue when necessary.

6. Third-Party Service Providers and Other Recipients

We disclose personal information to providers and other recipients that help us operate our business. These may include:

• E-commerce and website providers, including Shopify
• Email marketing and communications providers, including Klaviyo
• Payment processors
• Order fulfillment, delivery, and logistics providers
• Customer-service platforms
• Analytics, advertising, and retargeting providers, including Google, Meta, and Pinterest
• Review and business-listing services, including Yelp
• Fraud-prevention and security providers
• Cloud, business-software, automation, and data-analysis providers
• Professional advisers, including lawyers, accountants, auditors, and insurers
• Government authorities or other recipients when disclosure is required or permitted by law

During the preceding 12 months, we may have disclosed identifiers, customer-record information, commercial information, internet or other electronic network activity, approximate geolocation, audio or electronic communications, and inferences to the recipient categories above for the business purposes described in this Privacy Policy.

We require service providers and contractors to process personal information under written terms appropriate to their role and applicable law. Advertising and analytics partners may also process information under their own privacy policies and may be considered third parties under applicable privacy laws.

7. Links to Other Sites

Our Website may contain links to other websites. We are not responsible for their privacy practices or content. We encourage you to review their privacy policies before providing personal information.

8. Security Measures

We maintain reasonable administrative, technical, and physical safeguards appropriate to the nature of the personal information we process. Measures include:

• SSL encryption for data transmission
• Payment processing through PCI-compliant payment processors
• Limited employee access to personal information
• Secure servers, access controls, and firewalls

No method of transmission or storage is completely secure. If a security incident requires notice, we will notify affected individuals and authorities as required by applicable law.

9. Children's Privacy

Our consumer services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 without authorization required by law. If we learn that we collected such information contrary to applicable law, we will take appropriate steps to delete it. We do not knowingly sell or share the personal information of consumers under 16 years of age.

10. Your Rights and Choices

Depending on your state or country of residence and applicable law, you may have the right to:

• Request access to or confirmation of the personal information we process
• Request correction or deletion
• Obtain a portable copy of certain personal information
• Opt out of the sale or sharing of personal information and targeted advertising
• Limit certain uses or disclosures of sensitive personal information, if applicable
• Opt out of marketing communications
• Appeal a denial of a privacy request
• Exercise privacy rights without unlawful discrimination or retaliation

To exercise applicable rights, visit our U.S. Privacy Requests page. We may need to verify your identity before completing certain requests. An authorized agent may submit a request on your behalf as permitted by law.

11. Changes to This Policy

We may revise this Privacy Policy from time to time. Changes will be posted on this page with a new "Last Reviewed" date. If required by law, we will provide additional notice before a material change takes effect. Archived versions of this Privacy Policy are available upon request.

12. Contact Us

For questions or concerns about this Privacy Policy or our privacy practices, contact us:

• Privacy email: legal@nestbedding.com
• Customer service: customerservice@nestbedding.com
• Telephone: 888-992-2001
• Mail: Nest Bedding, 13290 Contractors Lane, Chico, CA 95973

Summary Privacy Notice

We collect personal information to provide products and services, process transactions, support customers, improve and secure our operations, and conduct marketing. We do not sell personal information for money or provide customer lists to data brokers. Advertising and analytics technologies may involve the sale or sharing of identifiers and browsing activity as those terms are defined by applicable law. You may opt out of nonessential cookies, targeted advertising, and sale or sharing through our cookie settings or U.S. Privacy Requests page.